Apache mod_shib: 'ShibRequestSetting requireSession 1' vs 'ShibRequireSession On'?

[Chad La Joie]

You should assume the Shib documentations are the authoritative docs.

In this case, both settings do the same thing.  The ShibRequestSetting
<property> <value> is a more generic mechanism and is now the
preferred method for setting SP settings.  The older options still
work, for backward compatibility reasons, but you should prefer the
newer mechanism.

On Fri, Feb 3, 2012 at 19:27, Stefan Lasiewski <slasiewski at lbl.gov> wrote:
> I am attempting to use mod_shib on an Apache 2.2 server.
>
> As I read through various Shibboleth wikis and tutorials, I notice that
> there seem to be two styles of commands which do the same thing.
>
> In this example, I want to require a Shibboleth session before access to an
> Apache location.
>
> Documentation on wiki.shibboleth.net [1] seems to use directives like
> "ShibRequestSetting requireSession 1".
>
> But at other sites [2], I see examples which use directives like
> 'ShibRequireSession On'
>
> Which is correct? Can I assume that 'ShibRequestSetting setting value' is
> the preferred method? If so, what is the purpose of the 'ShibRequireSession
> On' method? I can't find this documented anywhere.
>
> [1]:
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-EnablingtheModuleforAuthentication
> [2]:
> https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.4/sp/deployment/debian-source.html
>
> Thank you,
>
> -= Stefan
>
> --
> Stefan Lasiewski                         Email: stefanl at nersc.gov
> Computer System Engineer III    Email: slasiewski at lbl.gov
> Networking, Security, and Servers Group
>
> National Energy Research Scientific Computing Center
> Lawrence Berkeley National Laboratory
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered